Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d43f9107-2b3b-3d8d-84c3-6fb037f56be9.roa
File:                     d43f9107-2b3b-3d8d-84c3-6fb037f56be9.roa (raw, json)
Hash identifier:          qgAKzSgBy6MKGSRdv2aIbIsE5bVf4KJOqHdh7RsiMLY=
Subject key identifier:   12:27:88:EF:5D:81:8F:CC:C4:A1:63:37:CB:74:A9:F6:BE:EE:D4:6F
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E147ECE25B6A1AB8DC7276F00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d43f9107-2b3b-3d8d-84c3-6fb037f56be9.roa
Signing time:             Sat 06 Jun 2026 09:00:11 +0000
ROA not before:           Sat 06 Jun 2026 09:00:11 +0000
ROA not after:            Fri 04 Sep 2026 09:00:11 +0000
asID:                     44559
IP address blocks:        104.252.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:14:7e:ce:25:b6:a1:ab:8d:c7:27:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun  6 09:00:11 2026 GMT
            Not After : Sep  4 09:00:11 2026 GMT
        Subject: CN=ccbabae2-45e4-41b9-a7b4-772b2b34e5a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2c:23:14:f0:76:bf:eb:96:d1:71:2d:c8:6c:
                    57:3c:a3:ee:8e:f7:96:4b:b7:49:dd:a5:11:18:cb:
                    7e:07:96:19:3d:22:a2:33:c3:bc:d5:cb:71:59:ed:
                    f9:b2:1e:32:0f:88:ff:3b:37:61:c2:4c:ea:66:9b:
                    fe:5b:b6:ee:52:47:71:d5:a5:d3:ca:53:0d:3a:60:
                    39:5f:2c:c8:db:75:de:95:e7:46:b2:4e:69:89:28:
                    c5:48:28:5e:08:93:a8:19:9f:c3:a8:9c:7b:76:f4:
                    f3:17:ad:58:0a:8a:7d:1f:7e:57:f9:ae:e5:17:74:
                    46:69:d8:66:ac:2e:3b:cc:85:84:46:34:1e:7c:6d:
                    de:5d:3b:01:a1:1c:a7:6c:30:dd:8b:04:69:b8:97:
                    ff:d4:85:b0:6d:54:41:3c:55:9e:6e:6f:7b:e0:62:
                    97:d6:de:b7:59:a8:e5:5b:82:6a:2c:31:11:71:be:
                    dd:5a:14:c5:26:89:17:67:0e:8e:79:2c:f6:0b:77:
                    32:66:77:69:86:a4:2a:5f:0f:70:fc:94:80:b0:6e:
                    68:32:50:7e:c4:64:c8:37:cc:cc:91:79:30:23:b6:
                    19:c3:5d:3b:ee:7a:50:e6:56:5c:6a:e0:2a:53:48:
                    2b:b6:35:ec:97:37:f4:2c:7f:29:b7:8a:27:59:a7:
                    65:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:27:88:EF:5D:81:8F:CC:C4:A1:63:37:CB:74:A9:F6:BE:EE:D4:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d43f9107-2b3b-3d8d-84c3-6fb037f56be9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:83:d5:6d:30:2b:d2:83:1c:10:92:a6:34:1d:28:fd:40:1d:
         c5:37:04:25:e6:18:ba:93:df:79:dc:cb:fa:3e:8d:fb:33:7a:
         24:a7:cd:22:a1:a7:42:20:6d:86:f6:2a:eb:0b:81:b8:67:81:
         de:eb:c8:76:cf:cd:c0:e4:20:35:ac:32:00:c8:c9:44:7d:a4:
         a4:93:80:52:55:d5:b5:47:7d:2d:e5:c9:d3:77:67:53:46:64:
         95:d2:56:38:9c:d5:6d:20:fa:1d:79:e5:9c:80:a8:15:07:61:
         35:ce:9b:2f:16:e4:d1:60:aa:f5:a9:02:9a:d5:b0:75:ba:16:
         05:a9:de:9b:89:7b:89:5b:ed:61:6b:4f:b5:15:e9:b0:b7:1c:
         4e:59:19:c0:da:c8:b0:7f:46:5e:14:28:17:4d:a6:5f:e8:9a:
         89:d3:a0:83:dd:2e:06:1b:83:12:f2:2b:2e:a1:30:c7:a5:a4:
         c5:bc:b5:ff:ba:35:89:7e:78:24:87:20:ac:05:4b:9f:73:04:
         a7:e4:93:ef:73:f5:b5:72:00:72:36:41:aa:bb:28:bd:e9:9e:
         47:f4:3b:4c:92:e8:a6:ef:ca:ed:14:b2:d8:5a:f6:2a:b8:00:
         a3:92:f5:e7:3b:80:a4:67:c3:6e:d2:ee:11:65:54:d8:d2:c4:
         45:9c:ea:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:20:42 2026 by rpki-client